Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          mYIAmC1zc9c1tWoFs9T9ne64PiD7Zcy2aIc9awKzRuk=
Subject key identifier:   78:D6:C7:F4:2D:B8:D7:19:AF:2D:3C:60:D0:DA:D6:64:AA:E8:4B:BE
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       019DA566EFAA6EC1368E974085E6C15AE595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          0931
Signing time:             Sun 19 Apr 2026 11:01:19 +0000
Manifest this update:     Sun 19 Apr 2026 11:01:19 +0000
Manifest next update:     Mon 20 Apr 2026 11:01:19 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: L+3mbRwS9L0P3bD8cMQzsuWluYeINLRodNoRXZKbnbw=)
                          2: IY4Ud8FalvQX-HNlMYS_A9LK2SA.roa (hash: HbJnUoe0Yv6rvkXwg55slfYNJG8JrNBrpoCMGVfMWXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:66:ef:aa:6e:c1:36:8e:97:40:85:e6:c1:5a:e5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Apr 19 11:01:19 2026 GMT
            Not After : Apr 20 11:01:19 2026 GMT
        Subject: CN=78d6c7f42db8d719af2d3c60d0dad664aae84bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:89:cd:10:5b:1d:a5:1c:37:7b:82:75:c0:
                    2b:dd:6a:9c:f4:47:ae:58:73:76:4c:0f:5c:66:e4:
                    16:19:1b:ed:d9:11:96:89:9f:25:8d:04:bb:79:6d:
                    bb:49:4e:04:13:43:0b:8e:ba:26:5b:a5:25:10:81:
                    95:af:3a:62:a9:d2:4a:f0:78:c3:78:55:29:ed:f0:
                    1d:81:91:cd:26:ef:fb:65:b9:82:fd:22:8b:de:a4:
                    fa:30:9c:87:57:32:25:dd:cc:a7:9c:37:ad:92:9d:
                    00:51:49:d1:8b:47:9b:2d:a5:9a:5d:a2:36:88:f4:
                    a0:dc:05:50:9b:f9:cf:d0:14:aa:26:04:7f:ad:8a:
                    94:69:fc:24:e6:34:d5:79:f7:52:81:93:af:9c:bd:
                    64:16:b3:04:61:04:f2:14:19:65:c0:31:5d:0b:45:
                    80:97:c4:55:cf:18:05:f4:9b:5d:bf:8f:94:39:67:
                    39:f2:a0:37:be:df:b6:62:db:9d:c0:64:d6:7b:72:
                    9b:e7:75:87:a4:d2:f7:39:82:60:c6:fa:e5:77:26:
                    72:7d:a3:e8:1d:46:4c:45:2b:2a:3d:55:87:14:70:
                    d1:88:72:f7:77:f0:9c:be:4a:a5:22:aa:53:cf:0b:
                    a9:1d:7c:e8:a6:11:60:6c:1d:7f:0e:6a:f7:c0:4d:
                    f4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:C7:F4:2D:B8:D7:19:AF:2D:3C:60:D0:DA:D6:64:AA:E8:4B:BE
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:80:e9:2e:c6:4a:63:38:1a:d4:68:29:67:cf:96:1b:8a:
         47:02:b9:e0:39:c0:58:a6:7a:48:cf:01:97:ca:d8:7e:c7:1e:
         cf:d9:4c:5e:bb:e8:a9:56:d3:6d:34:9f:54:f9:35:93:6a:f5:
         62:b3:8f:38:a7:d3:67:c9:e7:df:80:62:24:cf:0c:a7:db:a2:
         91:73:44:be:01:e0:e8:b1:3d:0f:e7:26:77:3b:c1:f7:53:6b:
         7c:09:de:6f:a3:f8:65:72:ca:80:00:fb:2d:bb:36:e3:71:5e:
         78:8e:39:14:21:21:6c:73:20:79:f0:ab:50:04:e3:74:a0:9e:
         4b:1e:3c:02:86:0a:ec:85:af:be:2c:e8:a0:66:f7:c3:d8:25:
         23:db:e9:98:b0:b2:5e:80:32:01:e6:61:bc:38:36:14:92:e8:
         2b:c1:4f:2b:e1:3d:19:c2:f6:79:43:9f:c5:9b:d1:e1:69:66:
         83:7f:8e:80:11:46:fc:c6:58:a8:5d:f4:58:5c:9c:c6:8e:5a:
         5b:17:d0:f2:e1:d2:0b:24:f8:63:52:d0:aa:58:d2:d6:42:53:
         b4:57:3d:09:24:10:37:1b:07:87:48:94:54:fd:94:b9:36:9b:
         e0:79:ea:0f:8d:bd:bb:32:24:e5:d7:44:64:90:2d:8f:5a:d5:
         01:9b:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:13 2026 by rpki-client